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(57) Abstract 

According to oat aspect of die inventioa, a method of managing a computer system includes receiving event infmnatiaa at a Tivoli 
Enteiprise Console (130), the event information associated widi the computer system. The method also includes receiving a command to 
provide a portion of tbeevent infmoation to a help desk application program and automatically providing the event infonnatioo in a fonnat 
readable by a SeiviceCenter help desk appUcation program (230) in response to receiving a conunand to provide a portion of the «vent 
inf<mnatioQ to a help desk application pfograin. 
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METHOD AND SYSTEM FOR 
MANAGING COMPUTER SYSTEMS 

TECHNICAL FTEI.D OF TKE I WFNTTON 

This invention relates generally to the field of 
computer systems management and more particularly to a 
method and system for managing computer systems. 

5 

BACKGROUND OF THE TNVFOTTQN 

Computer systems have become pervasive in today's 
society. Although computer systems may provide many 
advantages that make work easier, con^uter systems often 

10 require maintenance. To assist in maintaining a con^uter 

system, infrastructure management tools are often employed. 
In some infrastructure management tools, an important 
aspect of infrastructure management is monitoring. 
Monitoring tools may try to detect errors in con^uter 

15 systems before they turn into problems and to react to 

possible problems before a customer experiences a problem 
and calls a help desk associated with the computer system. 

In one monitoring system, an event may be generated 
for each monitored item that does not conform to 

20 established criteria. An event describes the specifics of 

the affected device, the reason for non- conformance, and 
additionally ' provides control information, such as 
severity, class, or the time that the problem was detected. 
The event information may be consolidated within an event 

25 manager. The event manager handles the display functions 
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30 



and processing- of the events. One example of an event 
manager is the Tivoli Enterprise Console, available from 
Tivoli Systems of Austin, Texas, 

The Tivoli Enterprise Console may handle all event 
5 processing for monitored devices and may present that 

information to monitoring operators. Conventionally, the 
monitoring operators assess all incoming events, 
investigate the possible causes, and apply proper 
correction procedures if necessary. If the monitoring 
10 operators decide that further escalation is necessary for 

an event or that other support groups need to be involved 
for solving the problem, then a help desk system may 
require the event information. 

Help desk systems manage assignment of tasks related 
to solving various problems that may be experienced by a 
computer system. One example of a help desk system is 
Servicecenter, available from Peregrine Systems. Inc. 
Although the Tivoli Enterprise Console and the 
Servicecenter help desk each provide improvements to system 
management, the independent use of each of these creates 
several disadvantages. For example, events generated by 
the Tivoli Enterprise Console that require further 
assignment and escalation conventionally must be entered 
into the Servicecenter help desk system manually. This 
procedure may retard or deter the overall problem solving 
process. In addition, in order to provide status tracking, 
an event identification number needs to be stored in each 
system. However, manual input .of such; an idcnt^if ication 
number may cause a considerable amount of overhead. 
Moreover, synchronization between the two management tools, 
which is desirable to provide the same problem information 
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and event information to each management tool, cannot be 
readily achieved through separate use of each management 
tool because such synchronization may require help desk 
operators to have access to both management tools. 
5 Finally, manual integration of these two management tools 

could introduce typographical errors • 
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SUMMARY OP TTTW- TTjypiTn-T^TN 

Therefore, a need has arisen for a new method and 
apparatus that addresses the disadvantages and deficiencies 
of the prior art. The invention comprises a method and 
system for managing a computer system. 

According to one aspect of the invention, a method of 
managing a computer system includes receiving event 
information at a Tivoli Enterprise Console, the event 
information associated with the computer system. The 
method also includes receiving a command to provide a 
portion of the event information to a help desk application 
program and automatically providing the event information 
in a format readable by a ServiceCenter help desk 
application program in response to receiving a command to 
provide a portion of the event information to a help desk 
application program. 

According to another embodiment of the invention, a 
management system for managing a monitored device in a 
computer system includes a computing system having at least 
one processor and at least one memory accessible by the at 
least one processor. The management system also includes 
a Tivoli Enterprise Console event management system stored 
in the computing system. The event management system is 
operable to receive and process an event having event 
25 information. The event is associated with the monitored 

devices. The management system also includes a 

ServiceCenter help desk application program stored in the 
computing system. The ServiceCenter help desk application 
program is operable to process a problem record. The 
management system also includes interface programming 
stored on the computing system that operable to provide the 
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event information associated with the event to the help 
desk application program in a format readable by the help 
desk application program. 

The invention provides numerous technical advantages. 
5 For example, the- invention automatically provides 

information associated with an event received by an event 
manager to a help desk application, thus alleviating any 
delay associated with manual entry of this information and 
preventing errors associated with manual entry of this 

10 information. Furthermore, the status of the problem 

solution process, which is conventionally available to the 
help desk application, is automatically provided to the 
event manager. Thus the current status of the problem 
solving process can be kno%m by operators of both 

15 management systems, rather than solely known by operators 

of the help desk application. 

Moreover, any overhead associated with manually 
providing the problem solving status to the event manager 
is avoided. In addition, a problem identification number 

20 associated with the problem solving by the help desk 

application is automatically provided to the event manager, 
allowing status tracking without additional cost associated 
with manual entry of such an identification number . 
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BRIEF DKqcRTPTTnw of the r)Paw7^r.,c. 

For a more complete understanding of the present 
invention and the advantages thereof, reference is now made 
to the following descriptions taken in connection with the 
5 accompanying drawings in which: 

FIGURE 1 is a block diagram of one embodiment of a 
systems management system according to the teachings of the 
present invention; 

FIGURE 2A is a flow chart illustrating exemplary steps 
associated with exchanging information between an event 
manager application program and a help desk application 
program according to the present invention; 

FIGURE 2B is a flow chart illustrating exemplary steps 
of a portion of the flow chart illustrated in FIGURE 2A, 
showing additional details associated with automatil 
generation of a trouble ticket and opening and processing 
of a problem record; 

FIGURE 2C is a flow chart illustrating exemplary steps 
of a portion of the flow chart shown in FIGURE 2C, 
illustrating steps associated with monitoring processing of 
a problem record; and 

FIGURE 2D is a flow chart illustrating exemplary steps 
of a portion of the flow chart shown in FIGURE 2B. 
illustrating steps associated with executing a trouble 
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DETATT.Fn nPgrPTPTTON THB TrJVKNTTQN 

An embodiment of the present invention and its 
advantages are best understood by referring to FIGURE 1 and 
FIGURES 2A through 2D of the drawings, like numerals being 
5 used for like and corresponding parts of the various 

drawings. FIGURE 1 is a block diagram of one embodiment of 
a systems management system 10 according to the teachings 
of the present invention. Systems management system 10 
allows for support of computer systems or devices by 

10 automatically providing information exchange between an 

event manager application program and a help desk 
application program. 

Systems management system 10 preferably includes 
computing devices 100 and 200; however, computing devices 

15 100 and 200 may be replaced with any suitable number of 

computing devices, including a sole computing device. 
Systems management system 10 receives signals from device 
monitors 500. Device monitors 500 monitor managed devices 
400. 

20 Managed devices 400 may include a variety of types of 

devices for which monitoring is desired. Exeir^lary types 
of devices suitable for management by systems management 
system 10 include peripherals 410, software* 420, network 
connections 430, and other types of hardware 440. Non- 
25 conformance of managed device 400 with established criteria 
causes an event (not explicitly shown) to be generated. 

Device monitors 500 are illustrated in block diagram 
-^r^QXtn 4x^"SK:URE l .and may include a variety of different 
types of irtonitors, depending on the type of managed device. 
30 Device monitors 500 are shown as including device monitors 

510, 520, 530, and 540; however, any suitable number of 
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device monitors- may be employed- Device monitors 510, 520, 
530, and 540 produce event signals 515, 525, 535, and 545. 
Event signals 515, 525, 535, and 545 include event 
information associated with an event generated due to non- 
5 conformance of a managed device 400 with established 

criteria. 

Event information may include, for example, details of 
the non- conforming managed device, the reason for non- 
conformance, control information such as problem severity, 

10 class of the problem, and the time the non- conformance was 

detected, and other suitable information. This event 
information received from device monitors 510, 520, 530, 
and 540 is consolidated within an event manager application 
program. An event manager application program handles 

15 display of event information to a monitoring operator and 

processing of event information. One example of an event 
manager application program is an event manager application 
program 130, which is illustrated in FIGURE 1 and described 
in greater detail below. 

20 Computing device 100 preferably includes a processor 

110 and a memory 120. Processor 110 may be opercUsle to 
execute and access information stored in memory 120. 
Memory 120 may include storage devices, such as disk drives 
or other suitable methods for storing data, as well as 

25 random access memory. In one embodiment, computing device 

100 utilizes a UNIX operating system; however, any suitable 
type of computing device running on any suitable operating 
system may be used. Memory 120 stores event manage i 
application program 130. In one embodiment, event manager 

30 application program 130 is a Tivoli Enterprise Console, 

produced by Tivoli Systems of Austin, Texas. 
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Event manager application program 130 is operable to 
process each of event signals 515, 525, 535, and 545 from 
device monitors 500 and to present the event information 
associated with each of event signals 515, 525, 535 and 545 
5 to monitoring operators (not explicitly shown) for 

assessment . These monitoring operators may investigate the 
possible causes of non- conformance and aj^ly proper 
correction procedures if necessary. If a monitoring 
operator decides that further attention to an event is 

10 necessary or that other support groups need to be involved 

to address the event, event information contained in event 
signals 515, 525, 535, or 545 is automatically transmitted 
from event manager application program 130 to a help desk 
application program. The help desk application program 

15 controls the overall problem management process. 

Event information contained in event signals 515, 525, 
535, or 545 may be automatically transmitted upon command 
by a monitoring operator. An example of a monitoring 
operator commanding the automatic transmission of event 

20 information contained in event signals 515, 525, 535, or 

54 5 is a monitoring operator requesting the generation of 
a trouble ticket by clicking an option button in a menu bar 
of a computer display associated with event manager 
application program 130 • In response to clicking an option 

25 button in a menu bar, as discussed in greater detail below, 

a Unix shell script is launched. The Unix shell script 
initiates the automatic transfer of event information 
.■cont.aid:s^.«-<^-.-iJ:- tiA'^v- , signals^ 515, 525, -535, or 545. In 
anothei embodiment, event information contained in event 

30 signals 515 « 525, 535, or 545 is also automatically sent to 

a help desk application program, but a command from a 
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monitoring operator is not utilized. Rather, event manager 
application program 130 detects certain predetermined 
conditions associated with an event and, based on detecting 
certain predetermined conditions, automatically transmits 
5 the event information contained in event signals 515, 525, 

535, or 545. 

Event manager application program 130 is accessible to 
users through a number of suitable techniques. For example, 
a personal computer 140 running appropriate software or a 

10 workstation 150 may be used to access event manager 

application program 130. 

Computing device 200 preferably includes a processor 
210 and a memory 220 accessible by processor 210. In one 
embodiment, computing device 200 utilizes a UNIX operating 

15 system; however, computing device 200 may use any suitable 

operating system. Stored in memory 220 is a help desk 
application program 230. In one embodiment, help desk 
application program 230 is a ServiceCenter application 
program, available from Peregrine Systems Inc. Help desk 

20 application program 230 includes an input queue 250, a 

problem record processing programming 270, and an output 
queue 280. Each of these portions of help desk application 
program 230 is discussed in greater detail below. Help 
desk application program 230 may also contain additional 

2 5 programming . 

Help desk application program 230 is accessible 
through a variety of techniques. For, example, a help desk 
client 286, which is, for example, a dedicated personal 
computer or workstation directly connected to computing 

30 device 200 may be used to access help desk application 

program 230. Alternatively, for example, help desk 
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application program 230 may also be accessed through a 
workstation 294 connected to a mainframe computer 290, 
which is in turn directly connected to computing device 
200 . 

5 According to the teachings of the invention, help desk 

application program 230 receives event information received 
by event manager application program 130, opens a problem 
record (not explicitly shown) , processes the problem 
record, and returns status information associated with the 

10 problem record for eventual receipt by event manager 

application program 130. 

Interface programming 160 may be stored in memory 120, 
as illustrated in FIGURE 1. Alternatively, interface 
programming 160 may be stored in any suitable location, 

15 such as within memory 220, or within memory located in 

another computing device. Interface programming 160 
facilitates automatic communication of information between 
event manager application program 130 and help desk 
application program 230. 

20 Portions of memory 120 are preferably accessible, not 

only by processor 110, but also by processor 210. Thus, 
execution of either event manager application program 130 
by processor 110 or help desk application program 230 by 
processor 210 can alter portions of an input file 176 and 

25 an output file 180. Although computing devices 100 and 200 

are shown as separate computing devices, each containing a 
separate processor and memory, these two separate confuting 
devica^'v-vice^:; .^nR: ^* y a single computing 

device. 

30 In one embodimeint, interface programming 160 receives 

event information from event manager application program 
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13 0, interprets this event information, and provides this 
event information in an understandable format to help desk 
application program 230 for processing. In response to 
receiving this event information, help desk application 
5 program 230 generates a problem record associated with the 

event and processes the problem record. A problem record 
may contain information relating to an event, documentation 
relating to efforts to resolve non-conformance associated 
with an event, the status of efforts to resolve the non- 
10 conformance, and other additional information that is 
useful in resolving computer systems problems . In 
addition, interface programming 160 receives information 
relating to the processing of a problem record by help desk 
application program 230, such as status information. This 
15 received information is then interpreted by interface 
programming 160 and provided to event manager application 
program 13 0 in a form understandable by event manager 
application program 130. 

Interface programming 160 may include a trouble ticket 
20 script 170. In one embodiment, trouble ticket script 170 

is a UNIX Kom shell script; however, any suitable 
executable file or program may be used. Trouble ticket 
script 170 may be executed in response to receiving a 
command from a monitoring operator or, alternatively, 
25 automatically executed based on the content of event 

information received by event manager application program 
130. Event information received^ by event manager 
application program 130 is available to trouble ticket 
script 170 through environment variables set by event 
30 manager application program 130. Execution of trouble 

ticket script 170 initiates automatic transfer of event 
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information from event manager application program 130 to 
help desk application program 230. 

In addition to other functions discussed in greater 
detail below, trouble ticket script 170 modifies input file 
5 176 contained within interface programming 160. Once 

modified, input file 176 includes information received by 
trouble ticket script 170 from event manager application 
program 130 that is formatted for reception by help desk 
application program 230. 

10 Interface programming 160, may also include output 

file 180. Output file 180 stores information containing, 
for example, the status of a problem record generated by 
help desk application program 230 in response to the 
transmission of event information from event manager 

15 application program 130 to help desk application program 

230. 

Interface programming 160 may also include a logfile 
adapter 186. Logfile adapter 186 monitors output file 180 
for added text. Additions to output file 180 may include, 

20 for example, status information associated with an event. 

If a new line is written to output file 180, logfile 
adapter 186 sends the information contained in the new line 
to a rules engine 190, 

Rules engine 190 is also interface programming, but 

25 may be contained within event manager application program 

130 . Rules engine 190 includes interface programming that 
cooperates with interface programming 160 to provide status 
information rein f .y:'i:^-'^:'r^'-^\ ^ (^r sJ .^^^plication program :23jp 
to the event manager application pibgram 130 in a format 

30 understandable by help desk application program 230. 
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Interface- programming 160 may also include help desk 
input programming 196 . Help desk input programming 196 
monitors input file 176 for added text. Text is added to 
input file 176 through execution of trouble ticket script 
5 170. If text is added to input file 176, help desk input 

programming 196 sends the added text to input queue 250 of 
help desk application program 230 for subsequent processing 
by problem record processing programming 270. During 
processing and after processing is completed, information 

10 relating to, for example, the status of the processing is 

sent to output queue 280 for subsequent transmittal to 
output file 180. Thus, according to the invention, 
information may be automatically exchanged between an event 
manager application program and a help desk application 

15 program. 

With reference to FIGURE 1 and FIGURES 2A through 2D, 
operation of systems management system 10 is described. 
FIGURE 2A is a flow chart illustrating exemplary steps 
associated with the method of the invention, including 

20 detecting an event, automatically generating a trouble 

ticket associated with the event, opening a problem record, 
processing the problem record, and notifying event manager 
application program 130 of the status of processing of the 
problem record. 

25 The method of the invention begins with the step 610 

of monitoring for events. Device monitors 500 provide 
information to event manager application program 130, If 
an event is detected at step 612, event manager application 
program 130 receives event information from device monitors 

30 500 describing details of the event, the reason for any 

non- conformance to preset criteria, and additional control 
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information, such as severity of the problem, class of the 
problem, and the time of the problem. This event 
information is consolidated, correlated, and presented to 
a monitoring operator at step 613 by event manager 
5 application program 130 to determine if action by a help 

desk, such as help desk application program 230, is 
desirable- If a monitoring operator determines that action 
by help desk application program 230 is desirable, a 
trouble ticket command, requesting automatic generation of 

10 a troiible ticket, is generated. Alternatively, event 

manager application 130 may automatically determine that 
action by help desk application program 230 is desirable 
based on the contents of the event information and initiate 
a trouble ticket command, 

15 If action is desirable, a trouble ticket command is 

received at step 614. If automatic generation of a trouble 
ticket is commanded, at step 700 a trouble ticket is 
automatically generated and a problem record is opened and 
processed. The step 700 of automatically generating a 

20 trouble ticket and opening and processing a problem record 

is described in greater detail below in conjunction with 
FIGURE 2B. A purpose of automatically generating a trouble 
ticket is to automatically provide information associated 
with an event to help desk application program 230 in a 

25 format understandable by help desk application program 230. 

The generated troxible ticket, which is stored in input file 
176, contains information required by help desk application 
program 230 to open c pr.?V/i r.*i - :\ m c, f or . pr.ocesping and is 
also in a format understandable by help desk application 

30 program 230. A purpose of opening and processing a problem 

record is to determine the cause of the non -conformance 
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associated with the event associated with the problem 
record and to remedy the non-conformance. 

At step 1000, problem record processing that occurs at 
step 700 is monitored. Exemplary steps associated with 
5 step 1000 of monitoring processing of a problem record are 

illustrated in FIGURE 2C. A purpose of monitoring 
processing of a problem record is to keep event manager 
application program 130 current as to the status of the 
problem solving associated with the non- conformance that 

10 generated the event. When processing of a problem record 

is concluded, the status of the event associated with the 
processed problem record is changed to "CLOSED" at step 
1100, and the system continues to monitor for additional 
events. In one embodiment of the invention, an event can 

15 have three possible statutes: "OPEN, " "CLOSED, " and 

"ACKNOWLEDGED," An event has a status of "OPEN" when it is 
received by event manager application program 130. An 
event has a status of "CLOSED" when it has been closed. An 
event has a status of "ACKNOWLEDGED" after it has been 

20 acknowledged by an operator. 

Thus, according to the invention, event information is 
automatically provided from event manager application 
program 130 to help desk application program 230 in a 
format understandable by help desk application program 230. 

25 Conversely, according to the invention, status information 

concerning processing of a problem record associated with 
an event is provided from help desk application program 230 
to eyeht manager application program 130 in a format 
understandable by event manager application program 130. 

30 This exchange of information facilitates the problem 
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solving process and eliminates errors associated with 
manual entry of the above -described information. 

Details of step 700 of automatically generating a 
trouble ticket and opening and processing a problem record 
5 are discussed in conjunction with FIGURE 2B, Step 700 

accomplishes automatic transfer of event information from 
event manager application program 130 to help desk 
application program 230 in a format understandable by help 
desk application program 230. 

10 FIGURE 2B is a flow chart illustrating exemplary steps 

of step 700 of the flow chart illustrated in FIGURE 2A, 
showing additional details associated with automatically 
generating a troiible ticket associated with an event 
received by event manager application program 130 and 

15 opening and processing a problem record based on the 

automatically generated trouble ticket. A first step 800 
includes . executing trouble ticket script 170. Exemplary 
steps associated with step 800 of executing trouble ticket 
script 170 are illustrated in FIGURE 2D. As discussed in 

20 greater detail below, execution of trouble ticket script 

170 appends to input file 176 event information associated 
with the event for which automatic generation of a trouble 
ticket was requested. This information is appended to 
input file 176 in a format consistent with the format of a 

25 trouble ticket conventionally used with a ServiceCenter 

help desk application. In one endxDdiment, event 

information associated with an event for which automatic 
generation of a trouble ticket ir i v.^i;c£' d :i-s" c Vc^rH^i I t 
trouble ticket script 170 as environment varisJales in Unix. 

30 These environment variables are listed below in Table 1, 

which is an example listing of trouble ticket script 170. 
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Input file 176 is monitored at step 710 by help desk 
input programming 196 for any changes to input file 176. 
If a change in input file 176 is detected at step 720, 
information appended to input file 176 by trouble ticket 
5 script 170 is sent to event input queue 250 of help desk 

application program 230. Sending information appended to 
input file 176 to event input queue 250 may be accomplished 
by execution of help desk input programming 24 0 at step 
730. 

10 One example of suitable help desk input programming 

240 is the "AXFILED" programming associated with the AXCES 
application program available from Peregrine Systems, Inc. 
In such an embodiment, information is read from input file 
176 and sent to an input queue 250 for subsequent 

15 processing by problem record processing programming 270 as 

illustrated at step 740. In that embodiment, problem 
record processing programming 270 includes problem record 
processing programming available as part of the 
ServiceCenter help desk. Once input queue 250 receives 

20 this event information, a program record associated with 

the non- conforming event is opened and processed. Problem 
record processing programming 270 manages processing of a 
problem record. For example, problem record processing 
programming 270 may reassign a problem record, update a 

25 problem record, escalate a problem record, or otherwise 

operate to manage processing of a problem record. Problem 
re.cord processing programming 270^ appends information 
i;^] ating to ;thc status of the problem record to output file 
180 at step 750. In performing this step, the information 

30 may first be stored in output queue 280 before transfer to 

output file 180. Examples of information appended to 
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output file 180 include information identifying that a 
problem record has been opened or closed and an associated 
problem record identification number . 

Thus, according to the invention, event information is 
5 automatically provided from event manager application 

program 13 0 to help desk application program 230 in a 
format understandable by help desk application program 230. 

Details of step 1000 of monitoring processing of a 
problem record are discussed in conjunction with FIGURE 2C. 

10 Step 1000 accomplishes transfer of status information 

concerning processing of a problem record from help desk 
application program 230 to event manager application 
program 130 in a format understandable by event manager 
application program 130, 

15 FIGURE 2C is a flow chart illustrating exenplary steps 

of step 1000 of the flow chart illustrated in FIGURE 2A, 
illustrating steps associated with monitoring processing of 
a problem record. The step 1000 of monitoring processing 
of a problem record begins with step 1010 of monitoring 

20 output file 180 for changes, Logfile adapter 186 may 

perform this monitoring function. As illustrated in FIGURE 
2B, help desk application program 230 appends infoarmation 
regarding opening and closing of problem records to output 
file 180. In performing this step, the information may 

25 first be stored in output queue 280 before transfer to 

output file 180. If a change is detected in output file 
180 at step 1020, step 1025 of providing to rules engine 
190 the information in output file 180 rega-^dinr. opoving 
and closing of problem records is execut4,d by logfile 

30 adapter 186. This information may include, for exan^le. 
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information that a problem record has been open or closed 
or a problem number associated with an open problem record. 

Logfile adapter 186 has an associated format file for 
use in interpreting information in output file 180. An 
5 example format file is provided below in Table 1. 

Table 1; Example Loafile Adapte-r Fnrmat: File 

FORMAT SC_Callnumber FOLLOWS Logfile_Base 

tivpmo, %s+, %s: " OPEN %s %s %s %s " 
10 hostname "nsl dsmcl" 

msg PRINTF( "OPENED Service Center Call: %s", sc_callnumber) 

sc_callnumber $6 

e v_e ven t_handl e $ 3 

ev_server_handle $4 
15 ev_date_reception $5 

-msg_catalog $2 

adapter_host "nsl dsmc2" 

END 

20 FORMAT SC_Close_Event FOLLOWS Logfile_Base 

tivpmc, %s+, %s: "CLOSED %s %s %s %s" 
hostname "nsl dsmcl" 
date $1 

msg PRINTF(" CLOSED Service Center Call: %s", sc_call number) 

2 5 ® v_s e rver_handl e $ 4 

ev_event_handle $3 
ev_date_reception $5 
sc_callnumber $6 
-msg_catalog $2 

3 0 adapter_host "nsl dsmc2" 

END 

Copyright • 1997 by Electronic Data Systems, Inc. 

In conjunction with the format file, logfile adapter 186 
35 interprets information associated with a problem received 

and provide ' that information to rules engine 190 in a 
format unde;..standabl*, by rules engine 190 • At step 1030, 
rules engine 190 parses this information, or in other 
words, scans this information for recognizable strings, cuid 
40 at step 1040 makes the information available for use by 
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event manager- application program 130 in a format 
understandable by event manager application program 130 in 
order to update the status of an event or to provide the 
event with a problem record number associated with an open 
5 problem record. 

For the embodiment in which event manager application 
program 130 is a Tivoli Enterprise Console, incoming 
messages into event manager application program 130 should 
be defined in advance as a particular message class that 

10 describes the structure and format of the incoming message . 

To facilitate definition of incoming messages from help 
desk application program 230 to event manager application 
program 130, the following Tivoli classes are defined: 
SC_Event, SC_Troubleticket , SC_Call number, and 

15 SC_Close_Event . Definition of these classes may be as 

illustrated below in Table 2, in which the 
SC_Troubleticket, SC_Callnumber, and SC_Close_Event classes 
are each a type of the SC_Event class, and SC_Event is a 
type of an Event class, defined by the ServiceCenter 

20 application program available from Peregrine Systems, Inc. 

Table 2: Definition of Tivoli Classes 

TEC_CLASS : 
25 SC_EVENT ISA EVENT 

DEFINES { 

source: default + "SC"; 
sc_server_handle : . INTEGER; 
ev_server_handle : INTEGER ; 
30 ev_date_reception: INT32; 

ev_event_handle : INTEGER; 
}; .: ■ ■ : .... - 

END 

35 
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TECJZLASS : 

SC_Troubleticket ISA SC_EVENT 
DEFINES {' 

}; 

END 



TEC_CIiASS : 

SC_CallnuTnber ISA SC_EVENT 
10 DEFINES { 

}; 

END 



15 TEC_CIiASS 

SC_Close_Event ISA SC_EVENT 
DEFINES { 

}; 

END 

20 Copyright ® 1997 by Electronic Data Systems, Inc. 

In the embodiment in which event manager application 
program 130 is a Tivoli Enterprise Console, information 
sent by help desk application program 230 to event manager 
25 application program 130 preferably matches one of these 

classes. 

Providing information appended to output file 180 and 
interpreted by logfile adapter 186 regarding the opening or 
closing of a problem record to event manager application 

30 program 130 in a form understandable by event manager 

application program 130 may be accomplished at step 1040 
through the use of rules engine 190. For example, rules 
engine 190 may update an event in the event manager 
application program 130 to reflect that a trouble ticket 

35 has been reqLicst--,T'^; .tc j- thr ca^Tt, update an eyent in the 

event manager application program 130 to contain a problem 
record number associated a problem record, or change the 
status of an event in the event manager application program 
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130 to "CLOSED'^ when a corresponding problem record number 
is closed. 

In addition, rules engine 190 may drop events. An 
example of dropping an event is dropping "fake events" sent 
5 to event manager application program 130 by trouble ticket 

script 170. A fake event may be sent by help desk 
application program 230 to event manager application 
program 130 as a method for communicating to event manager 
application program 130 that a trouble ticket has been 

10 generated. Such a fake event provides immediate feedback 

to a monitoring operator who requested generation of a 
trouble ticket. Once a fake event provides this 
information, it may be dropped by rules engine 190. A 
listing of example rules included in an example of rules 

15 engine 190 is given below in Table 4. 

Thus, through the use of output file 180, logfile 
adapter 186, and rules engine 190, status information may 
be provided to event manager application 130 in a format 
understandable by event manager application program 130. 

20 Therefore, according to the invention, status information 

may be automatically transferred from help desk application 
program 230 to event manager application program 130 in a 
format understandcUble by event manager application program 
130. 

25 Details of step 800 of executing trouble ticket script 

170 are described in conjunction with FIGUR£ 2D. Execution 
of trovible ticket script 170 automatically generates a 
trouble ticket, which is stand in ,ir^5ut file 176, thus 
facilitating automatic transfer of event information from 

30 event manager application program 130 to help desk 

application program 230. 
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FIGURE 2D* is a flow chart illustrating exemplary steps 
associated with step 800 of the flow chart shown in FIGURE 
2D, illustrating steps associated with executing trouble 
ticket script 170, A first step of executing trouble 
5 ticket script 170 may include step 810 of checking for 

event acknowledgment. Event acknowledgment may occur, for 
example, in response to a monitoring operator manually 
acknowledging an event by clicking an associated menu 
button on a computer display. Event ac3cnowledgment may 

10 occur when automatic generation of a trouble ticket is 

commanded. As another example, an event may be 

acknowledged automatically by event manager application 
program 130 based upon predetermined criteria. If sm event 
is acknowledged, processing may continue. If an event is 

15 not acknowledged, processing is halted. In one embodiment 

an event acknowledcfment check is performed by examining the 
contents of an environment variable storing the status of 
an event. If the status of an event is "OPEN," then it has 
not been acknowledged and trouble ticket script 170 is 

20 exited. If the status of an event is "ACKNOWLEDGED," then 

it has been acknowledged. 

After an event is acknowledged a check is performed at 
step 820 for previous generation of a problem record 
associated with the event- In one embodiment, checking to 

25 see if a problem record has been previously generated is 

accomplished by examining an environment variable 
associated with event manager application program 130. If 
no previous problem record was genexatCv-, a problem record 
is opened and event information is written to input file 

30 176 at step 830. Steps associated with one example of 

writing event information to input file 176 are provided in 
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an example troxible ticket script listing provided below in 
Table 3. 

At step 840, notification that event information has 
been written to input file 176 is sent to event manager 
5 application program 130. In one embodiment, this 

notification is addressed to an administrator of event 
manager application program 130. In another embodiment, a 
monitoring operator that acknowledged an event for 
assignment to help desk application program 230 is stored 

10 as an environment variable, and notification is sent to 

that monitoring operator. 

At step 850, a fake event is generated. A fake event 
is generated to update the original event that was received 
by the event manager application program 130 with an 

15 indication that a trouble ticket has been generated for the 

event. The fake event is sent to event manager application 
program 13 0 by using the event handling capabilities of 
event manager application program 130. The received fake 
event is then dropped by rules engine 190, An example of 

20 sending a fake event to event manager application program 

130 is provided in the example trouble ticket listing shown 
in Tctble 3 . 

The above steps 810, 820, 830, 840,' and 850 are 
exemplary steps associated with step 800 of executing 

25 troxible ticket script 170, which facilitates automatic 

transfer of event information from event manager 
application program 130 to help desk application program 
230. Thus, the invention all9ws for automatic support of 
computing systems or devices by automatically providing 

30 information exchange between an event manager application 

program and a help desk application program. 
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Although the invention has been particularly shown and 
described by the foregoing detailed description, it will be 
understood by those skilled in the art that various changes 
in form and detail may be made without departing from the 
5 spirit and scope of- the invention. 
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Tabl^ Rxainple T r^llH ^ rVef. Scriot 



#i/bin/ksh 

# 

# 

5 # 

# $Header$ 

# 

# 

#Copyright * 1997 by Electronic Data Systems, Inc. 
10 # This script is used to allow for events viewed through the 

# Tivoli Event Console to be used in creating Trouble Tickets 
# 

# The first and only argument to this shell is the value passed in 

# from the Dialog Description language. Using the AEF, the 

15 # dialog can be extended to use this shell script to invoke other 

# actions by switching on this argument. 
# 

# The slot values defined for the root class of the T/EC Events 

# are set in the environment prior to invoking this shell 
20 # 

# These environment variables are 
# 

# ACIi, ADAPTER^HOST, ADMINISTRATOR, CAUSE_DATE, CAUSE_HNDL, 

# CLASS_NAME, DATE_EVENT, DATE_RECEPTION, EV_KEY, 
25 FORMATTED_DATE, 

# HANDLE, HOSTNAME, MSG, ORIGIN, SEVERITY, SOURCE, 
SRVR_HANDLB, 

# STATUS, SUB_ORIGIN, and SUB_SOURCS 
« 

30 # The object ID of the client where the invocation of this shell 

# occurred can be obtained from the environment variable TMF_SEI»F, 
# 

###############################################################«#### 
# 

35 # Change Control 

# 

# Name Date Version Description 
# 

# 1.0 Initial Version 

4 0 # E MacDonncha 12/8/96 1.2 - Changes to the 

processing of 

$SEVERITY, 

- Got rid of %customer%, 
% assignment% and %priority% 
45 # - Got rid of the data 

blocking . 

#######################«##««#########«««#######################«##««« 

# Setting up output destination: 

# (use alternate output for testing) 

# 

OUT«/opt /sc/tec/tivoli . in 



55 



#OUT«/tmp/tivoli . in 
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########«################################################«########### 
# Report generator: 



5 TMPFII*E«/tni5)/TT$$ 





gen^fila {) 


{ 






echo 


> $TMPFILE 




echo 


•Trouble Ticket $1 for" >> $TMPFILE 


10 


echo 


» $TMPFIIiE 




echo 


"Claas: 


${CIASS_NAME}" » $TMPFII*E 




echo 


"Source : 


$ {SOURCE}" » $TMPFILE 




echo 


"S\ib_Source: 


${St3B_SOURCE}" » $TMPFILE 




echo 


"Host: 


$ {HOSTNAME}" » $TMPFILE 


15 


echo 


"Origin; 


$ {ORIGIN}" » $TMPFILE 




echo 


"Sub_Origin: 


${SUB_ORIGIN}" » $TMPFIIJS 




echo 


N N 


" » $TMPFILE 




echo 


••Ev_Key: 


${Ey__KEY}" » $TMPFILE 




echo 


"Date : 


${FORMATTED_DATE}" >> $TMPPILE 


20 


echo 


"Severity: 


$ {SEVERITY}" » $TMPFILE 




echo 


"Status : 


$ {STATUS}" >> $TMPFILE 




echo 


"Administrator: $ {ADMINISTRATOR} " >> $TMPFILE 




echo 


M m 


« STWPFIIjE 




echo 


"Msg: ${MSG) 


" » $TMPFII*E 


25 


echo 


a tt 


» $TMPFILE 



} 

# Event must be ac3cnowledged to raise a trouble ticket. 
30 #«########################################«######################### 



if C "${STATUS}" m "OPEN"] 
then 

35 exit 1 

fi 

###############################«#################################### 

# If message starts with *. discard TT, is already generated 

40 #«###################################################«############## 

TT_TRUE«$ {MSG%%\** } 

if C "$TT_TRUE" - "• 1 ; then 
45 exit 1 

fi 

########«###«###«##############«#########«#########################« 

# Fixing plogger bug sending \r chars inside $MSr 

LineMSG«*echo $ {MSG} | a%^ -P"\a" ' {gs\ib{"\r", "|"); printf "%a". $0}*" 
#echo "MSG«">/tzop/gt 
#echo $MSG>>/tinp/gt 
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#echo ••lineMSG»">>/tmp/gt 
#echo $lineMSG>>/ttrp/gt 

# Setting up fields used by PNMS 

5 # Field for which Tivoli can't provide values are left blank 

# 

######################«## 

# open or close ticket 
10 ########################« 

# 

if [ "${STATUS}" m -CLOSED" ] ; then 
evtype-tivpmc 
gen_file closed 

15 else 

evtype-tivpmo 
gen_file generated 



20 



fi 



25 



30 



35 



40 



45 



#######################» 

# pass date info in form suitable for PNMS 

# it is impossible to use other DATE variables 

# as they don't have a defined format 
####################«#»« 

« 

evtime-'echo $ {fORMATTED_DATE} | a*^* 
BEGIN{ 

. month ["Jan''l-»01« 
month("Feb"J«"02" 
month I -Mar " ) - " 03 " 
month E "Apr •]-" 04 " 
month [ "May" ) - " 05 " 
month("Jun") -"06" 
month ("Jul") -"07" 
month C "Aug" )«" 08 " 
month f Sep") --09" 
month I "Oct " ) - " 10 " 
month ("Nov") -"11" 
month ( "Dec" )-" 12 " 

) 

# format MM/DD/YY hh:mm:ss 
« {print month ($1) "/• $2 "/" 

{print ■") 



sub6tr($4«3) 



$3} 



« {print month ($1) •/- $2 "/• "XI" " " $3} 
- # {print month($l)-/" $2 "/" substr($4,3) " " $3} . 

Determine the TT Category 
##############«####################«####################«##########« 
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#case $ {SUB_S0URCE} in 

# SEC ) category- ' EDS . NL . SMC . SECURITY ' ; ; 

# BCK ) category»*EDS.NL.SMC.B/R' ; ; 

# APPL_SC ) ca tegory« ' EDS . NL . SERVICECENTER * ; ; 

5 # ♦ ) 

# case ${ SOURCE} in 

# HPOV ) category- • EDS . NX* . SMC . UNIX • ; ; 

^ SW ) cat egory-'EDS.NL.SMC. NETWARE' ; ; 

# NT ) category- • EDS. NL.. SMC. NT* ; ; 

10 # LOGFILE I SCRIPT | PATROL ) category- • EDS . NL. SMC . UNIX ; 

♦ ) category- ' EDS , . NL . SMC . CI ' ; ; 

# esac 
#esac 

15 # 

####################################«################^#####«######## 

# Split longer lines (longer than 75) into separate lines 
#################################################################### 
# 

20 actioni-*echo $ {MSG}|cut -bl-7S -n* 

actionii-'echo $ {MSG}|cut -b76- -n* 
if C-${actionii}--''"] ; then 

actionii-"TivoliClass-${CLASS_NAME} • 

actioniii- * 

25 else 

actioniii-"TivoliClass-${CLASS_NAMB} ■ 

fi 
# 

3 0 #######################################«###############« 

# change the ADMINISTRATOR variable to first six positions 
######################################################## 

# 

35 SCUSER-'echo $ADMINISTRATOR | awk * {print toupper (substr ($X, 1, 6) ) } ' " 

#######################################################« 
# split the event key into three parts 

#######«###########################«##################«# 

40 

EVSH-*echo $BV_KBY | awk » {print substr ($1, 1, 1, ) } ' " 
EVEH«"echo SEV^KEY | awk '{print siibstr ($1, 2 , 1) } * " 
EVDATE«*echo $EV_KEy | awk '{print substr ($1, 3) ) • " 

45 #########««#########«##«# 
#setup the other fields 
###########«##«####«#«#«* 
# 

evsysseq- 
5 0 e vus r 8 eq« $ { EV_KKY } 

evsyscpt- 

evuser- $ { SCUSER} 

evpswdo 

evsepchar* ■ ^ ■ 
55 logical- 
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network* $ (HOSTKAME) 

reference* 

cause* 

netvorkaddress* 
5 type- 
domain* 
Ob j id« 
version* 
model* 

10 serial* 
vendor* 
location* 
contactname* 
contactphone* 

15 resolution* 
evsh-${EVSH} 
eveh*${EVEH} 
evdate- { EVDATE } 
severity«$ { SBVERITV} 



20 



25 



################################################################ 
# Putting all fields together 

# 



Di-"${evtype} , ${evtime} , ${ev8ysseq} , ${evu8rseq} , ${evsyBopt} , " 
Dii*"${evuscr} {evpswd} ,${evsepchar} :$ {logical }${evsepchar} " 
Dili * " $ {network} $ { evsepchar } $ { reference } $ { evsepchar } $ { cause ) • 
Div* " $ { evsepchar }${ act ioni } $ { evsepchar) $ { actionii } $ { evsepchar } * 
3 0 Dv* " $ { actionii } $ { evsepchar ) $ { ne tworkaddress ) $ { evsepchar } " 

Dvi * " $ { type } $ { evsepchar } $ { category) $ { evsepchar } $ { domain) " 
Dvii- " $ { evsepchar } $ {ob j id) $ {evsepchar ) $ {version} $ {evsepchar } $ {model } • 
Dviiio"$ {evsepchar }$ {serial }$ {evsepchar }$ {vendor }$ {evsepchar }${locati 
on) " 

3 5 Dix- " $ { evsepchar } $ { contactname ) $ { evsepchar) $ { contactphone } " 

Dx- " $ { evsepchar } $ { resolution ) $ { evsepchar ) $ { evsh } $ { evsepchar ) 
Dxi* " $ {eveh) $ { evsepchar } $ { evdate } $ { evsepchar) $ { severity) " 

######««####«#«#####«#«#####«################################### 

4 0 # Appending result to output file 

######################«#######«#####«###################«#####»« 
« 

echo 

45 "${Di)${Dii)${Diii)${Div)${Dv}${Dvi}${Dvii)${Dviii)${Dix}${Dx)${Dxi}- 
>> 

$OXJT 

hX' t S^si(fc.;Vv4JLy to Admii , 

ADMIN*" "echo $ADMINISTRATOR | awk -P\« '{print $l)'*" 
55 wsendresp ${AI»4ZK} $TMPFXLB 
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################################################################ 

# Update the Tivoli Message Slot by sending a fake event 
################################################################ 

wpostemsg -m "Fake Event !!" -rWARNINQ sub_source«TT\ 

e v_s e rver_handl e « $ SRVR_HANDI*E 
ev_date_reception»$DATE_RECEPTION\ 

ev_event_handle-$HANDI*E SC_Troubleticket SC 

##########«###«#########«#####################«################# 

# Delete the temporary file we*ve created ... 

################################################################ 
rm -f $TMPFII-E 
exit 

Tahlfi 4r Rxample Rules 

20 /♦ Service Center Rule Set 

* Copyright ^ 1997 Electronic Data Systems, Inc. 

♦ Service Center rule set for Service Center events . 



10 



15 



25 



* Author: Fred Kouwenberg 
♦ 

♦ MODIFICATIONS 



*/ 

*******♦♦*••*/ 

35 rule: 8c_tt_generated : ( 

description: 'Updates the message slot by putting an asterisk in 
front of the message * , 

4 0 event: _event of^class • SC_Trouble ticket • 

where [ ev_server_handle : _sh, 
ev_date_reception : _dr, 
ev_event_handle : _eh] , 

45 reception_action: update_msg_slot : ( 

all_instances (event : 

_mod_event o£_class 'EVENT' 
where [ server^handle : equals _8h, 
date_reception: equals _dr, 
50 event_handle : equals _eh, 

status: equals *ACK* , 
msg : _msg3 ) , 
atomconcat {['♦', _msg3 , _new_^rasg) , 
bo^set^slotval (_mod_evcnt, msg^^new^msg) , 

5 5 r e_mark_a8_niodi f ied (_mod_event # . 
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drop_r ece ived^event 



5 /****/ 

rule : drop_f ake^event : ( 

description: 'Drops the fake event when the old event is alread 
10 gone' , 

event: _event of_class • SC_Trouble ticket • 
where [ msg : _msgl , 

15 reception_action: drop_received_f ake_event : ( 

atompart (_msg, 'Fake Event', 1 * _) # 
drop^recei ved_event , 
commit^rule 

) 

20 ) . 

/****/ 

rule : sc_callnviinbe regenerated : ( 

description: 'Updates the 8C_calln\iinber slot with the actual SC 
Callniunber' , 



event: _event of_class »SC_Callnuniber» 
3 0 where [ ev_server_handle: _8h, 

ev_datc_reception : _dr , 
e v_e vent_handl e : _eh , 
sc_callnumber : _scc] , 

3 5 reception_action: update_8c_8lot : < 

all_instances (event : 
_mod_event of^class 'EVENT' 
where [ server_handle : equals _sh, 
date^reception : equals _dr, 
40 event_handle : equals _eh« 

msg: _msg, 

status: equals *ACX*]), 
atomconcat ( [ • • ,_8cc ] , _new_msg_l) , 
atomconcat ( t_new_msg_l , ^msg] , _^new_msg) 
45 re_mark_as_modif ied(_inod_event,_) , 

drop_received_event , 
coTnmit_rule 

) 

50 ). 

/**♦♦/ 

riile: drop_8C OPENED event : ( 

55 
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description: - 'Drops the event that reports that a Service Center 
Call is OPENED* , 

event: _event of_class ' SC_Callnumber ' 
5 where [ msg : _msgl , 

reception_action: drop^received sc^OPENED^event : { 
atompart (_msg,. 'OPENED', i, _) , 
drop_received_event , 
10 coinmit_rule 

) 

) . 

15 

rxile : sc_close_event : ( 



description: 'Closes the Tivoli event when the SC event is closed*, 

20 

event :_event of_clase ' SC_Close_Event ' 
where [ ev_server_handle : _sh, 
ev_date_reception: _dr, 
ev_event_handle : _eh3 , 

25 

reception_action : close_tivoli_event : { 
all_instances (event: 
_mod_event of_clas8: 'EVENT* 
where [ server_handle : egxials _ah, 
30 date_reception: equals _dr, 

event_handle : equals _eh3 ) , 
se t_event_s tatus (_mod_event , ' CLOSED ' ) , 
re_mark_as_modif ied (_mod_event , _) , 
drop_received_event , 
3 5 corami t_rul e 

) 

) . 

40 /♦*♦♦/ 

r\2le: drop_sc_CLOSED_event : ( 

description: 'Drops the event that reports that a Service Center 
45 Call is CLOSED*, 



event: _event of_class * SC_Close_Event * 
where [ msg : _msg3 » 

50 reception_action: drop_reccived_sc_CLOSED^event : { 

atompart (_msg, 'CLOSED', 1# _) , 
drop^received^event , 
commit_rule 

) 

55 ). 
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************ 



/•••••••••••••••••••••* CHANGE RULES 

*"* ..♦.*..•♦./ 

5 /**************************** *• 

*************/ 

/************ ***•..*.•♦•.**••• 

10 * •**•/ 

/***•********•***•••*•• TIMER ROLES 

*♦/ 

*************/ 

15 
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WHAT IS CIATMED TS . 

1. A method for managing a computer system, the method 
comprising: 

receiving event information at a Tivoli Enterprise 
5 Console, the event information associated with the computer 

system; 

receiving a command to provide a portion of the event 
information to a help desk application program; and 

automatically providing the event information in a 

0 format readable by a ServiceCenter help desk application 
program in response to receiving a command to provide a 
portion of the event information to a help desk applicaion 
program . 

5 2, The method of Claim 1 wherein the step of 

automatically providing the event information in a format 
readable by a ServiceCenter help desk application program 
in response to receiving a command to provide a portion of 
the event information to a help desk application program 

) further comprises the step of automatically providing the 

event information to a ServiceCenter help desk application 
program . 

3. The method of Claim 1 wherein the step of 

1 automatically providing the event information in a format 
readable by a ServiceCenter help desk application program 
comprises automatically generating a trouble ticket. 
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4 . The method of Claim 3 and further comprising the steps 
of: 

generating an identification number associated with 
the automatic generation of a trouble ticket; and 

automatically providing the identification number to 
the Tivoli Enterprise Console* 



5. The method of Claim 1 and further comprising the steps 
of: 

10 determining whether a problem record has been 

generated in response to the step of providing the event 
information in a format readable by a ServiceCenter help 
desk application program; and 

opening a problem record if a problem record has not 

15 been generated in response to the step of automatically 

providing the event information in a format readable by a 
ServiceCenter help desk application program. 



6 . The method of Claim 1 wherein the step of receiving a 
20 command to provide a portion of the event information to a 

help desk application program comprises receiving a command 
automatically generated based on the content of the event 
information. 



25 7. The method of Claim 1 and further comprising the steps 

of: 

opening a problem record in response to automatically 
providing the evenf. i7V''n\'MrT i*^n A--: ? f ormat readable by a 
ServiceCenter help deb! applicrit"* Or program; 
30 processing the problem record; and 
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automatically providing status information associated 
with processing the problem record to the Tivoli Enterprise 
Console , 

5 8 . The method of Claim 7 wherein the step of 

automatically providing status information comprises the 
steps of : 

monitoring an output file for added informations- 
detecting added information in the output file; and 
10 translating the added information into a format 

understandable by a Tivoli Enterprise Console. 

9. A management system for managing a monitored device, 
the management system comprising: 
15 a computing system comprising at least one processor 

and at least one memory accessible by the at least one 
processor; 

a Tivoli Enterprise Console event management system 
stored in the computing system, the event management system 
20 operable to receive and process an event having event 

information, the event associated with the monitored 
device; 

a ServiceCenter help desk application program stored 
in the computing system, the help desk application program 
25 operable to process a problem record; and 

interface programming stored on the computing system 
operable to automatically provide the event information 
associated with the event to the help desk application 
program in a format readable by the help desk application 
30 program. 
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10- The management system of Claim 9 wherein: 

the ServiceCenter help desk application program is 
further operable to generate an identification number 
associated with the event; and 
5 the interface programming is further operable provide 

the identification number to the event management system. 

11. The system of Claim 9 wherein the interface 
programming is further operable to: 

10 determine if an identification number associated with 

the event has been generated; and 

generate an identification number associated with the 
event if an identification number associated with the event 
has not been generated. 

15 

12. The system of Claim 9 wherein the interface 
programming is operable to monitor an input file for 
changes and in response to detecting changes transmit 
information contained in the file to the ServiceCenter help 

20 desk application program. 

13 . The system of Claim 9 wherein the interface 
programming is operable to provide status information 
associated with the problem recor<i in a format 

25 understandable by the Tivoli Enterprise Console. 

14. A systems management system, the system comprising: 

a computing system Qo:i:^viFin^' at ler.pi one processor 
and at least one memory accessible by the. at least one 
30 processor; 
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a Tivoli "Enteirprise Console stored in the computing 
system and operable to run on the computing system, the 
Tivoli Enterprise Console operable to receive and process 
an event, the event containing event information; 
5 a ServiceCent^r help desk application stored in 

computing system cuid operable to run on the computing 
system, the ServiceCenter help desk operable to process a 
trouble ticket; and 

interface programming stored on the computing system 
10 operable to automatically generate a trouble ticket based 

on the event information. 



15 . The computerized system of Claim 14 wherein the 
interface programming further comprises programming 
15 operable to determine if a trouble ticket has previously 

been generated for the event . 



16 . The computerized system of Claim 14 wherein the 
interface programming further comprises programming 

20 opersible to send a fake Tivoli event to the ServiceCenter, 

the fake Tivoli event indicating that a trouble ticket has 
been requested for the event. 

17 . The computerized system of Claim 14 wherein the 
25 interface programming further comprises programming 

operable to receive information in response to the 
ServiceCenter processing a trouble ticket and provide an 
^ i:t5i,^xvif ication number associated with the trouble ticket to 
the Tivoli Enterprise Console. 

30 



BNSOOQD: <WO_98S212lA2_L3 



SUBSTITUTE SHEET (RULE 26) 



wo 98/52121 



41 



PCTAJS98/09837 



18 . The comptiterized system of Claim 14 wherein the 
interface programming further comprises programming 
operable to monitor an output file for changes and in 
response to detecting changes in the output file provide 

5 information associated with the trouble ticket to the 

Tivoli Enterprise Console in a format understandable by the 
Tivoli Enterprise Console. 

19 . The computerized system of Claim 14 wherein the 
interface programming further comprises programming 
operable to monitor an input file for changes to the input 
file and upon detecting changes to the input file transmit 
information contained in the input file to a portion of the 
ServiceCenter help desk application in a format 
understandable by the ServiceCenter help desk application. 

20. The, computerized system of Claim 14 wherein the 
interface programming further comprises an AXFILED process 
and the interface programming further comprises an 

20 executable file operable to generate an input file based on 

the event information, the input file having a foarmat the 
can be read by the ServiceCenter AXFILED process. 



10 



15 
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